SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

[former_member1114361]

Hi,

I am using "sap crystal_reports 2008 report viewer component" that comes along with kofax capture software. This is used by kofax software to display reports. After running the security scan, we have one vulnerability on that component. How do i mitigate that.

we have following version of printx component "PrintControl.dll Version is 12.1.4.1068"

Is there a way to upgrade this version of PrintControl dll?

[former_member11696 · Accepted solution]

You can upgrade to the last patch available 7.4 from here:

https://origin.softwaredownloads.sap.com/public/site/index.html

BUT BEFORE you upgrade check with the software makers to check to see if they support it, it can break things upgrading.

CR 2008 is 10+ years old, time to upgrade. We don't fix any security issues in legacy versions.

And no idea if that issue was resolved in the last patch.